I have been trying to get tripwire configured, but because I run nightly backups I get warnings due to time changes on files. I have added the -a which I thought was to ignore access times, but I still get it. It makes tripwire almost useless as it reports over 2000 errors. Most of the errors are the same as the one below. For example, this is one I get. TWReport myserver.com 20031003070101 V:2196 S:100 A:0 R:0 C:2196 Modified object name: /etc/sysconfig/network-scripts/ifup-routes Property: Expected Observed ------------- ----------- ----------- * Change Time Fri Jun 27 14:04:46 2003 Thu Oct 2 23:03:02 2003 If I run the database update and then rerun it: TWReport myserver.com 20031002080850 V:0 S:0 A:0 R:0 C:0 But as soon as I do the backup, it returns to over 2000 errors. If anybody can lead me in the right direction, they will find a little something extra in their paycheck. Lint! :-P Seriously though, I am getting ready to roll out my RHAS servers and want to keep a close eye on hacker attacks. Thanks Ed Croft, RHCE -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
